Netapp Oncommand System Manager vulnerabilities

• netapp oncommand system manager OnCommand System Manager 9.x versions prior to 9.3P20 and 9.4 prior to 9.4P3 are susceptible to a... CVE-2020-8587 5.5 MediumFebruary 8, 2021
• apache tomcat, debian linux, netapp element plug-in +9 more +11 more Apache Tomcat: Request header mix-up between HTTP/2 streams CVE-2020-17527 Public exploitFix available EPSS 24.6% 7.5 HighDecember 3, 2020
• eclipse jetty, the eclipse foundation eclipse jetty, apache kafka +15 more +17 more Buffer not correctly recycled in Gzip Request inflation CVE-2020-27218 Fix available 4.8 MediumNovember 28, 2020
• apache tomcat, canonical ubuntu linux, debian linux +15 more +17 more Infinite Loop in Apache Tomcat CVE-2020-13935 Public exploitFix available EPSS 86.6% 7.5 HighJuly 14, 2020
• apache tomcat, canonical ubuntu linux, debian linux +11 more +13 more Improper Restriction of Operations within the Bounds of a Memory Buffer in Apache Tomcat CVE-2020-13934 Fix available EPSS 64.1% 7.5 HighJuly 14, 2020
• apache tomcat, canonical ubuntu linux, debian linux +5 more +7 more Uncontrolled Resource Consumption in Apache Tomcat CVE-2020-11996 Public exploitFix available EPSS 26.7% 7.5 HighJune 26, 2020
• jquery, juniper junos, netapp active iq unified manager +4 more +6 more Cross-Site Scripting in jquery CVE-2020-7656 Public exploitFix available 6.1 MediumMay 19, 2020
• jquery, debian linux, drupal +49 more +51 more Potential XSS vulnerability in jQuery CVE-2020-11023 In KEVPublic exploitFix available EPSS 84.9% 6.9 MediumApril 29, 2020
• jquery, debian linux, drupal +67 more +69 more jQuery has a potential XSS vulnerability CVE-2020-11022 Public exploitFix available EPSS 99.2% 6.9 MediumApril 29, 2020
• netapp oncommand system manager OnCommand System Manager versions 9.3 prior to 9.3P18 and 9.4 prior to 9.4P2 are susceptible to a... CVE-2019-17276 5.4 MediumMarch 24, 2020
• apache tomcat, geode, blackberry good control +18 more +20 more Improper Privilege Management in Tomcat CVE-2020-1938 In KEVPublic exploitFix available EPSS 99.3% 9.8 CriticalFebruary 24, 2020
• apache tomcat, canonical ubuntu linux, debian linux +17 more +19 more Potential HTTP request smuggling in Apache Tomcat CVE-2020-1935 Fix available 4.8 MediumFebruary 24, 2020
• apache tomcat, tomee, debian linux +13 more +15 more Potential HTTP request smuggling in Apache Tomcat CVE-2019-17569 Fix available 4.8 MediumFebruary 24, 2020
• netapp oncommand system manager NetApp OnCommand System Manager 2.1 and earlier allows remote attackers to inject arbitrary... CVE-2013-3322 7.2 HighJanuary 31, 2020
• netapp oncommand system manager NetApp OnCommand System Manager 2.1 and earlier allows remote attackers to include arbitrary... CVE-2013-3321 7.5 HighJanuary 29, 2020
• netapp oncommand system manager Cross-site Scripting (XSS) vulnerability in NetApp OnCommand System Manager before 2.2 allows... CVE-2013-3320 Public exploit 6.1 MediumJanuary 29, 2020
• apache tomcat, canonical ubuntu linux, debian linux +3 more +5 more Insufficiently Protected Credentials in Apache Tomcat CVE-2019-12418 Fix available 7.0 HighDecember 23, 2019
• apache log4j, bookkeeper, canonical ubuntu linux +14 more +16 more Deserialization of Untrusted Data in Log4j CVE-2019-17571 Public exploitFix available EPSS 70.0% 9.8 CriticalDecember 20, 2019
• eclipse jetty, the eclipse foundation eclipse jetty, debian linux +24 more +26 more Installation information leak in Eclipse Jetty CVE-2019-10247 Fix available 5.3 MediumApril 22, 2019
• eclipse jetty, the eclipse foundation eclipse jetty, netapp element +23 more +25 more Information Exposure vulnerability in Eclipse Jetty CVE-2019-10246 Fix available 5.3 MediumApril 22, 2019
• backdropcms backdrop, drupal, jquery +102 more +104 more XSS in jQuery as used in Drupal, Backdrop CMS, and other products CVE-2019-11358 Public exploitFix available EPSS 86.8% 6.1 MediumApril 17, 2019
• eclipse jetty, the eclipse foundation eclipse jetty, debian linux +17 more +19 more Jetty vulnerable to authorization bypass due to inconsistent HTTP request handling (HTTP Request Smuggling) CVE-2017-7658 Fix available EPSS 19.0% 9.8 CriticalJune 26, 2018
• eclipse jetty, the eclipse foundation eclipse jetty, debian linux +15 more +17 more Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2017-7657 Fix available EPSS 14.4% 9.8 CriticalJune 26, 2018
• eclipse jetty, the eclipse foundation eclipse jetty, netapp e-series santricity management plug-ins +10 more +12 more Access and integrity issue within Eclipse Jetty CVE-2018-12538 Fix available 8.8 HighJune 22, 2018
• netapp oncommand system manager NetApp OnCommand System Manager before 9.0 allows remote attackers to obtain sensitive... CVE-2016-5045 8.1 HighJuly 3, 2017
• netapp oncommand system manager Multiple functions in NetApp OnCommand System Manager before 8.3.2 do not properly escape special... CVE-2016-3063 7.5 HighFebruary 7, 2017
• netapp oncommand system manager NetApp OnCommand System Manager 8.3.x before 8.3.2P5 allows remote authenticated users to cause a... CVE-2016-5047 6.5 MediumSeptember 1, 2016